Amendments to the Claims 
1 . (Currently Amended) A method^ comprising: 

receiving a request for hardware component information in-at_a service processor 
disposed in a hardware component as an open session request from a 
requesting client application , which requ e st pas s ed to th o Ger\nc e proces s or 
extemal to an op e rating s ystem controlling th e hardware compon e nt ; 

transmitting from the service processor a challenge string to the requesting client 
application, the challenge string includes including a sequence number 
that incr e m e nts with each n e w s e ssion session identification assigned by 
the service processor, wherein the session identification is unique to each 
session ; 

receiving in-at the service processor a challenge response from the requesting 

client application, the challenRe response including a hash number that is a 
function of at l e ast on e of th e chall e ng e s tring, s e ssion id e ntification 
number, sequence number, and a password the session identification : 

comparing the challenge response to an expected response to the challenge strings 
wherein the comparing includes verifying the session identification 
received in the challenge response against the session identification 
transmitted in the challenge string ; and 

transmitting the h ardware component information to the requesting client 
application. 
Claims 2-3 (Cancelled) 

4. (Currently Amended) The method according to claim 1, wherein the challenge 

response includes a sequence number that increments with an-every new message. 
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5. (Canceled) 

6. (Currently Amended) The method according to claim 1, further comprising 
examining each packet received from the client application for one or more of the 
following: the session identification numb e r , the sequence number^ and a hash 
number. 

7. (Currently Amended) The method according to claim 6, wherein the hash number 
is -comprises a function of one or more of the following: the session identification 
number , the sequence number^ and the-a_packet itself 

8. (Currently Amended) A method^ comprising: 

transmitting a request for hardware component information to a service processor 
disposed in a hardware component as an open session request from a 
requesting client appHcation , th e request to b e pass e d to th e s e rvic e 
proces s or extemal to an operating syst e m controlling the hardware 
compon e nt ; 

receiving from the service processor a challenge string at the requesting client 
application, the challenge string includes a sequenc e number that 
incr e m e nts with e ach n e w s e ssion including a session identification 
assigned by the service processor, wherein the session identification is 
unique to each session : 

transmitting to the service processor a challenge response from the requesting 

client application, the challenge response including a hash number that is a 
function of at l e ast on e of th e chall e ng e string, s e ssion id e ntification 
numb e r, sequence number, and a password the session identification ; and 
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receiving from the service processor an authentication response to the requesting 
client application based on a comparison of the challenge response from 
the requesting client application and an expected challenge response 
calculated in the service processo r, wherein the comparison includes 
verifying the session identification in the challenge response transmitted to 
the service processor against the session identification received in the 
challenge string . 
Claims 9-11 (Cancelled) 

12. (Currently Amended) The method according to claim 8, further comprising 
transmitting with each packet sent by the client application one or more of the 
following: the session identification numb e r , the sequence number and a hash 
number, ^^ wherein the hash number is- includes a function of one or more of the 
following: the session identificatio n number , the sequence number^, and the-a 
packet-^teelf. 

13. (Currently Amended) An apparatus^ comprising: 
a remote access port; and 

a service processor coupled to the remote access port ?, wherein the service 

processor including a machine readable machine-readable medium, having 
stored thereon a set of instructionsrwhich^ when executed. , p e rfomi 
m e thod comprising o f cause the service processor to : 
in response to a remote request for information about a component 

received as an open session request through the remote access port 
extemal to a host operating system of the apparatus, the service 
proc e ssor transmiting transmit a challenge string to a requesting 
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client application, the challenge string includ e s a s e quence niunbor 
that increment s with each new sessio n includinR session 
identification assigned by the service processor, wherein the 
session identification is unique to each session ; 
comparing compare a challenge response received from the requesting 
client application with an expected response to th e challongo , the 
challenge response including a hash number that is a function of at 
l e ast on e of th e chall e nge string, s e ssion identification number, 
s e qu e nc e numb e r, and a password the session identification, 
wherein the comparing includes verifying the session identification 
received in the challenge response against the session identification 
transmitted in the challenge string ; and 

transmitting transmit an authentication response to the requesting client 
application based on the comparison. 
Claims 14-15 (Cancelled) 

16. (Original) The apparatus according to claim 13, wherein the service processor 
compares a sequence number included in the challenge response against 
previously received sequence numbers and ignores the challenge response if it 
does not include a sequence number in correct sequence. 

17. (Original) The apparatus according to claim 13, wherein the service processor 
compares a hash number received in the challenge response with an expected hash 
calculated by the service processor and transmits a success or failure message 
depending upon a result of the comparison. 

Claims 18-19 (Cancelled) 
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20. (Currently Amended) A system^ comprising: 
a processor; 
a memory; and 

a client application stored on a machine readable machine-readable medium, the 
client application including a set of instructions which^ when executed, 
perform a method o f cause the client application to : 
transmitting transmit a request for hardware component information to a 
service processor disposed in a hardware component as an open 
session request , the request to be pas s ed to the service processor 
e xt e mal to an op e rating syst e m controlling the hardwar e 
compon e nt ; 

receiving receive from the service processor a challenge string at the 
requesting client application, the challenge strin g includes a 
sequence number that increment s with each new s ession including 
a session identification assigned by the service processor, wherein 
the session identification is unique to each session ; 

transmitting transmit to the service processor a challenge response from 
the requesting client application, the challenge r esponse including 
a hash numb e r that is a function of at least on e of th e challeng e 
s tring, session identification number, s equence number, and a 
password the session identification ; and 

r e c e iving receive from the service processor an authentication response to 
the requesting client application based on a comparison of the 
challenge response from the requesting client application and an 

expected challenge response calculated in-at_the service processor^ 
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wherein the comparison includes verifying the session 
identification received in the challenge response against the session 
identification in the challenge string . 

21-30 (Canceled) 

3 1 . (Currently Amended) A machine readable machine-readable medium having 

stored thereon a set of instructions which^ when executed by a machine, p e rform a 
method o f causes the machine to : 

transmitting receive a request for hardware component information to a service 
processor disposed in a hardware component as an open session request^ 
the r e quest to be passed to the ser\dce proc e ssor external to an op e rating 
sy s t e m controlling th e hardwar e compon e nt ; 

r e c e iving transmit from the service processor a challenge string at the requesting 
client application, the challenge string includes a sequence numb e r that 
incr e m e nt s with e ach n e w s e ssion including a session identification 
assigned by the service processor, wherein the session identification is 
unique to each session ; 

ti'ansmitting to r eceive at the service processor a challenge response fi"om the 
requesting client application, the challenge response including-a-feasfe 
nimib e r that is a function of at l e ast on e of th e chall e ng e string, s es sion 
id e ntification numb e r, sequ e nc e numb e r, and a password the session 
identi fication ;-and 

compare the challenge response to an expected response to the challenge string, 
wherein the comparing includes verifying the session identification 
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received in the challenge response against the session identification 
transmitted in the challenge string; and 
r e c e iving transmit the hardware component information fi-om th e G e r\^ice 

proc e ssor an authentication response to the requesting client application 
based on a comparison of the challenge respons e from the r e qu e sting 
cli e nt application and an expected chall e nge r e spons e calculat e d in th e 
service processor . 
Claims 32-33 (Cancelled) 

34. (New) The system according to claim 20, wherein the service processor compares 
a sequence number included in the challenge response against previously received 
sequence numbers and ignores the challenge response if it does not include a 
sequence number in correct sequence. 

35. (New) The system according to claim 20, wherein the service processor compares 
a hash number received in the challenge response with an expected hash 
calculated by the service processor and transmits a success or failure message 
depending upon a result of the comparison. 

36. (New) The machine-readable medium according to claim 3 1 , wherein the 
challenge response includes a sequence number that increments with aa-every 
new message. 

37. (New) The machine-readable medium according to claim 3 1 , wherein the set of 
instructions which, when executed by the machine, further causes the machine to 
examine each packet received fi"om the client application for one or more of the 
following: the session identification, the sequence number, and a hash number. 
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